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1. (currently amended) A method of securing a network interface device 
installed on a host comprising: 

initializing the network interface device without transmit functions; 

receiving notification that the host on which the network interface is 
installed has been authenticated; and 

in response to receiving notification that the host has been 
authenticated, enabling transmit functions of the network interface device. 

2. (currently amended) The method of claim 1, wherein initializing the 
network interface device comprises initializing the network interface device 
without receive functions. 

3 . (currently amended) The method of claim 2, further comprising in 
response to receiving notification that the host has been authenticated, 
enabling receive functions of the network interface device. 

4. (currently amended) The method of claim 3, wherein enabling receive 
functions of the network interface device comprises routing received data to 
a network stack. 

5. (currently amended) The method of claim 1, further comprising accessing 
a firewall policy server to download firewall policy information that is used 
by a firewall on the network interface device after enabling transmit 
functions of the network interface device. 
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6. (original) The method of claim 5, wherein accessing a firewall policy 
server is performed before transmitting or receiving data from other clients 
or servers. 

7. (original) The method of claim 5, wherein accessing a firewall policy 
server comprises authenticating the firewall policy server. 

8. (original) The method of claim 5, wherein receiving notification that a 
host has been authenticated includes receiving notification that the host has 
been authenticated for a role, and wherein accessing a firewall policy server 
comprises downloading firewall policy information for the role. 

9. (currently amended) The method of claim 1, further comprising receiving 
firewall policy information communicated to the host and using the firewall 
policy information at a hardware based firewall on the network interface 
device. 

10. (currently amended) A network interface device for use in a host on a 
network, the network interface device comprising: 

a network port adapted to send and receive network information; and 
a module that disables at least one of transmit and receive 
functionality to the network port of the network interface device until the 
network interface device is notified that the host in which the network 
interface device is used has been authenticated. 



11. (currently amended) The network interface device of claim 10, further 
comprising a firewall adapted to prevent the network interface device from 
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communicating with other devices according to firewall policy information 
stored at the firewall. 

12. (currently amended) The network interface device of claim 1 1, further 
comprising nonvolatile memory, and wherein the firewall policy information 
is stored in the nonvolatile memory. 

13. (currently amended) The network interface device of claim 1 1, wherein 
the network interface device is adapted to receive firewall policy 
information from a firewall policy server. 

14. (currently amended) The network interface device of claim 10, wherein 
the network interface device is embodied as a network interface card. 

15. (currently amended) The network interface device of claim 14, wherein 
the network device is embodied as a Secure CardBus network card. 

16. -18. (cancelled) 

19. (currently amended) A method of securing a network interface device 
installed on a host comprising: 

initializing the network interface device without receive functions; 

receiving notification that the host on which the network interface is 
inst all ed has been authenticated; and 

in response to receiving notification that the host has been 
authenticated, enabling receive functions of the network interface device. 
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20. (currently amended) The method of claim 19, wherein enabling receive 
functions of the network interface device comprises routing received data to 
a network stack. 
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